Attorney Docket No. NTWK-012/00US 

What is claimed is: 

1 . A computer system for providing proxy firewall services for a computer network, 
comprising: 

a dispatch host computer, said dispatch host computer being connectable to an external 
5 network; and 

at least one load host computer coupled to said dispatch host computer, said at least one 
load host computer configured to provide proxy firewall services, said at least one load host 
3 computer being connectable to one or more application servers, wherein said connection from the 
J external network is distributed from said dispatch host computer to a particular load host 
1 0 computer based on an analysis of the type of protocol of the connection. 

i 2. The computer system of claim 1 , wherein said dispatch host computer includes a 

J monitoring element that listens for connections on multiple ports. 

15 3 . The computer system of claim 2, wherein said monitoring element is a dispatch 

proxy. 

4. The computer system of claim 1 , wherein said at least one load host computer is a 
protocol specific load host computer. 
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5. The computer system of claim 1 , wherein said at least one load host computer can 
handle multiple protocols. 

6. The computer system of claim 1 , wherein said at least one load host computer and 
said dispatch host computer communicate information regarding the connection of said at least 
one load host computer to the computer system. 

7. The computer system of claim 6, wherein said dispatch host computer includes a 
configuration file with information relating to any load host computers in the computer system. 

8. The computer system of claim 7, wherein upon the connection of another load 
host computer to the computer system, said configuration file is updated to reflect the availability 
of said another load host computer in the computer system. 

9. The computer system of claim 1 , wherein said dispatch host computer provides 
proxy firewall services. 
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1 0. A method of providing proxy firewall services for a computer network, 
comprising: 

identifying a set of load host computers, each load host computer in said set of load host 
computers being configured to provide proxy firewall services; 

monitoring one or more incoming ports at a dispatch host computer for a connection; 

upon identification of said connection, selecting from said set of load host computers a 
load host computer to which said connection should be forwarded based on an analysis of the 
type of protocol of said connection. 

11. The method of claim 1 0, wherein said identifying comprises communicating 
information between said dispatch host computer and said load host computers relating to the 
availability of said load host computers. 

12. The method of claim 1 0, wherein said monitoring comprises monitoring for a 
connection with a dispatch proxy that monitors one or more incoming ports on said dispatch host 
computer simultaneously. 

13. The method of claim 10, wherein said selecting comprises selecting a load host 
computer based on a round robin load distribution among said load host computers. 
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14. The method of claim 10, wherein said selecting comprises selecting a load host 
computer based on the availability of the load host computers. 

15. The method of claim 10, wherein said selecting comprises selecting a load host 
computer based on the percentage of the total number of simultaneous proxied connections the 
load host computer can support. 

16. The method of claim 10, wherein said selecting comprises selecting a load host 
computer that can support a resource intensive protocol. 

17. A firewall network resource method comprising: 
identifying a resource intensive protocol; 

designating a load host computer for providing primary support for said resource 
intensive protocol; and 

routing a connection for said resource intensive protocol from a dispatch host computer to 
said designated load host. 

18. The method of claim 1 7, further comprising: 

processing on the dispatch host computer a connection for at least one protocol other than 
said resource intensive protocol. 
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1 9. The method of claim 1 7, wherein said designated load host provides exclusive 
support for said resource intensive protocol. 

20. The method of claim 1 7, wherein said designated load host is dedicated to said 
5 resource intensive protocol. 

21. The method of claim 1 7, further comprising: 

}'i designating another load host for multi-purpose support. 

1% o 22. The method of claim 17, wherein said dispatch host computer has multi-purpose 

H support. 

il 23 . A method of expanding proxy firewall services for a computer network 

i& comprising: 
1 5 receiving a connection at a dispatch host computer; 

selecting a first load host computer to which the connection should be forwarded; 
forwarding said connection to said first load host computer; 
connecting a second load host computer to said dispatch host computer; and 
updating a configuration file on said dispatch host computer to reflect the connection of 
20 said second load host computer, wherein upon said updating, said second load host computer is 
available to process forwarded connections from said dispatch host computer. 
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24. The method of claim 23, wherein said updating comprises communicating 
information between said dispatch host computer and said second load host computer regarding 
the availability of said second load host computer. 

25. The method of claim 23 , wherein said forwarding, said connecting, and said 
updating occur substantially simultaneously. 

26. The method of claim 23, wherein said connecting and said updating occur during 
the provision of proxy firewall services. 
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